The API description says that authentication is supposed to be required, but it is not. I don't know if this is a typo or if something is wrong, but you don't have to be authenticated to get the updates of a twitter list by ATOM (or any other format, for that matter).
Not that I'm complaining: http://www.dizzysoft.com/twitter/twitter-lists-text-messages
